Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/sP9MDaR7BIgZIvUxENF_hzEjlMo.roa
File:                     sP9MDaR7BIgZIvUxENF_hzEjlMo.roa (raw, json)
Hash identifier:          0zN2SAx34iReiim1iLSsuTGzw0KtE9lO6I6eoDMZ3CQ=
Subject key identifier:   B0:FF:4C:0D:A4:7B:04:88:19:22:F5:31:10:D1:7F:87:31:23:94:CA
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       08112A8C
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/sP9MDaR7BIgZIvUxENF_hzEjlMo.roa
Signing time:             Sat 01 Jan 2022 05:55:37 +0000
ROA not before:           Sat 01 Jan 2022 05:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13030
IP address blocks:        2a11:8b80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135342732 (0x8112a8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: Jan  1 05:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0ff4c0da47b04881922f53110d17f87312394ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:a8:4a:aa:5a:ed:45:c8:1f:09:63:fa:e1:
                    6e:f6:75:07:7b:08:59:a2:5e:68:f1:5f:76:26:e5:
                    3d:c9:80:40:e1:ee:57:af:79:ea:3e:1d:22:1f:b6:
                    44:88:77:b2:1f:f9:6c:09:ec:23:22:92:18:2f:3d:
                    47:1a:a7:26:8e:df:fe:28:c5:37:48:6d:18:19:27:
                    df:75:43:82:76:48:13:56:a3:c8:25:8e:35:9c:6e:
                    5b:47:03:b6:51:10:09:fe:17:d3:9c:18:ef:d2:da:
                    f4:6f:d4:22:3c:9a:50:51:23:b2:a0:8d:c7:02:a9:
                    c9:34:d0:3c:58:48:a0:b3:df:23:da:19:e6:cb:17:
                    8b:49:08:95:d6:a5:fc:c3:98:b2:30:00:81:97:6a:
                    ac:c8:5f:dd:30:01:e1:d1:0d:92:0e:81:01:85:49:
                    de:fe:1b:af:a8:f9:b1:69:d5:f0:a2:cf:0e:07:27:
                    e3:0d:c0:28:7d:4f:9f:c0:88:2e:11:f7:a1:9e:3f:
                    48:0c:a6:33:0e:92:5a:62:23:44:e9:fd:25:f0:ec:
                    c2:ac:c9:47:e5:02:b9:07:de:de:a1:22:0d:3a:87:
                    d0:ab:d7:58:ad:9a:f5:ae:72:f4:ae:bb:9f:34:96:
                    59:99:62:48:d7:c1:74:ea:8b:bd:61:70:1e:aa:8d:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FF:4C:0D:A4:7B:04:88:19:22:F5:31:10:D1:7F:87:31:23:94:CA
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/sP9MDaR7BIgZIvUxENF_hzEjlMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:12:8d:fe:15:e5:2f:73:0f:d9:e2:5f:4c:0c:f5:e8:e0:
         67:f0:fd:0c:be:c5:30:ef:c4:7b:0a:3f:df:f2:36:39:ad:53:
         e7:39:21:46:ae:9c:5a:c2:78:ba:22:68:33:a2:02:bf:6e:17:
         3a:d3:8f:14:57:ca:e7:41:5d:30:48:42:48:2e:05:51:10:31:
         43:84:41:0b:c4:45:c5:d4:6d:f0:c9:65:91:d9:a0:53:b9:85:
         b8:cd:db:64:10:2d:32:2d:69:e4:14:10:82:3e:c6:f9:13:b4:
         70:26:d1:c6:7d:cf:e9:42:7a:22:8b:d7:53:8c:f4:bf:f4:6e:
         13:ef:c5:97:0f:3b:84:35:df:b8:c3:77:56:97:4b:cd:5f:c6:
         f0:2d:e9:3b:75:0d:21:0b:a7:61:a7:51:1c:00:3e:d1:65:f7:
         f3:60:58:0d:45:0f:09:7d:15:74:64:96:38:f6:48:02:b9:ae:
         3b:6d:65:a0:69:6d:a4:d3:8a:79:5d:a1:55:07:90:04:8e:13:
         d5:9e:d6:1e:76:87:b9:9e:9e:4f:34:81:5c:65:90:05:be:3f:
         df:d6:47:69:ac:51:82:01:96:ab:e1:95:eb:a2:96:d7:7c:d4:
         fe:e9:24:ef:87:05:cc:7b:62:31:68:67:52:d6:1e:c4:44:bf:
         66:5d:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----